Overview

overview

9

Static

static

63e974add1...60.exe

windows7_x64

6

63e974add1...60.exe

windows10_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63e974add1e2916b56681fb1869d2960

  • Size

    4.5MB

  • Sample

    201117-8r11cgce9n

  • MD5

    63e974add1e2916b56681fb1869d2960

  • SHA1

    9030a31a9eaca2ca0ce6d05383332697e00f0832

  • SHA256

    984b027a5932756b53fb1b5674ee4e38301ea0e70ef5e8d816afb5f88a22550e

  • SHA512

    cc54747680c9e9a7115d81e56a0fb3d854dcd572e15cdde3be5a8ede354f112b3bc048712bdbd1d1e6b6c258074bfa46c5f3115ba0ef37ce1f8fb4c95c97d05b

Score
9/10
discovery

Malware Config

Targets

    • Target

      63e974add1e2916b56681fb1869d2960

    • Size

      4.5MB

    • MD5

      63e974add1e2916b56681fb1869d2960

    • SHA1

      9030a31a9eaca2ca0ce6d05383332697e00f0832

    • SHA256

      984b027a5932756b53fb1b5674ee4e38301ea0e70ef5e8d816afb5f88a22550e

    • SHA512

      cc54747680c9e9a7115d81e56a0fb3d854dcd572e15cdde3be5a8ede354f112b3bc048712bdbd1d1e6b6c258074bfa46c5f3115ba0ef37ce1f8fb4c95c97d05b

    Score
    9/10
    discovery

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks